Aleksei Sviridkin cd57ee6678 test(multus): anchor the master-CNI assertion to the top-level key ...

The check that multus is pointed at the cilium conflist matched its
JSON fragment anywhere in the rendered daemon config.  The same text
nested inside any other key satisfies it, so a config whose effective
multusMasterCNI names a different conflist passes.  Multus uses that
value as written when it is non-empty -- it delegates to whatever is
named, so a wrong-but-existing name silently routes through the other
CNI instead of cilium, which is the state this assertion exists to
prevent.  Auto-discovery happens only when the value is empty, and a
name that does not exist fails manager startup rather than falling
back.

Anchor it to the top level, where the template writes its keys.  That
pins the position rather than parsing the document; deciding which key
is effective needs a JSON parser, which helm-unittest does not have.

Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-08-05 14:19:47 +03:00

..

application-definition-crd

feat(api)!: require the application release prefix to be dot-free

2026-07-22 00:07:55 +03:00

backup-controller

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

backupstrategy-controller

feat(backups): support PostgreSQL point-in-time recovery (PITR) (#3383)

2026-07-23 14:14:58 +04:00

bootbox

refactor(labels): remove cozystack.io/ui label

2026-01-19 13:59:29 +01:00

bootbox-rd

[docs] Updated app go types

2026-03-25 15:57:25 +05:00

bucket

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

bucket-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

capi-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

capi-providers-bootstrap

fix(kubernetes): address review findings on Talos worker bootstrap

2026-06-23 14:45:53 +05:00

capi-providers-core

fix(capi): add startupProbe to capi-controller-manager to survive cert provisioning delay (#2946)

2026-06-18 10:40:05 +05:00

capi-providers-cpprovider

Prepare release v1.6.0-rc.4

2026-07-21 10:31:23 +00:00

capi-providers-infraprovider

fix(cluster-api): fix kamaji OOM and set limits on unset providers

2026-05-21 12:57:02 +05:00

cert-manager

fix(cert-manager): move the webhook off the kubelet's port

2026-07-20 00:20:06 +03:00

cert-manager-crds

fix(cert-manager): bump chart to v1.20.2

2026-05-03 20:49:47 +05:00

cert-manager-issuers

feat(platform): add deletion-protection guardrail via ValidatingAdmissionPolicy

2026-05-26 14:18:22 +05:00

cilium

feat(gateway): advertise HTTP/2 via ALPN on Gateway API listeners (#3398)

2026-07-23 16:05:31 +04:00

cilium-networkpolicy

chore(metallb): bump to v0.16.1 and rotate host-network port denylist

2026-05-29 11:07:19 +03:00

clickhouse-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

clickhouse-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

cluster-autoscaler

feat(cluster-autoscaler): enable enforce-node-group-min-size by default

2026-02-14 11:42:52 +01:00

clustersecret-operator

Add clustersecret-operator system package

2026-02-10 22:47:20 +05:00

computeplane-rd

fix(computeplane): address review round three

2026-07-28 18:08:03 +02:00

coredns

chore(packages/system/coredns): refresh coredns chart to 1.46.0

2026-06-22 21:46:49 +03:00

cozy-proxy

feat(cozy-proxy): bump to v0.3.0

2026-04-28 11:14:27 +02:00

cozystack-api

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

cozystack-basics

fix(cozystack-basics): gate the hostname VAP policies on the VAP API

2026-07-23 12:39:11 +03:00

cozystack-controller

feat(workloadmonitor): bucket metrics endpoint override

2026-07-23 15:35:00 +03:00

cozystack-scheduler

[cozystack-scheduler] Publish SchedulingClass demo (#2252)

2026-07-30 14:20:18 +05:00

dashboard

fix(dashboard): stop requesting offline_access so logout can revoke sessions

2026-07-24 14:19:18 +03:00

etcd-operator

test(etcd-operator): pin deployment unittest to v0.5.4

2026-08-04 13:09:25 +04:00

etcd-operator-crds

chore(etcd-operator): bump etcd-operator to v0.5.4

2026-08-04 12:41:43 +04:00

etcd-rd

feat(platform): migrate to etcd-operator v1alpha2

2026-07-06 14:41:33 +04:00

external-dns

[external-dns] Set resources requests/limits on external-dns container

2026-07-03 19:14:15 +03:00

external-dns-rd

ci(external-dns): regenerate cozyrds schema for gatewayAPI description

2026-05-25 19:11:52 +03:00

external-secrets-operator

fix(external-secrets): move the webhook off the kubelet's port

2026-07-20 04:49:57 +03:00

flux-plunger

chore(deps): update container image & action digests

2026-07-10 05:29:23 +00:00

flux-shard-operator

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

fluxcd

fix(fluxcd): omit empty distribution.artifact in FluxInstance

2026-07-14 13:10:59 +03:00

fluxcd-operator

feat(fluxcd): bump flux-operator/flux-instance charts to v0.50.0

2026-05-31 19:04:20 +05:00

foundationdb-operator

chore(packages/system/foundationdb-operator): bump fdb-operator to v2.30.0

2026-06-23 03:47:31 +03:00

foundationdb-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

gateway-api-crds

feat: Gateway API support via Cilium

2026-05-25 17:07:02 +03:00

goldpinger

[goldpinger] Set resources requests/limits on goldpinger DaemonSet

2026-07-03 19:14:27 +03:00

gpu-operator

feat(gpu-operator): add container variant for preinstalled host driver

2026-06-08 16:58:51 +03:00

grafana-operator

build(grafana-operator): mirror Grafana catalog plugins into the dashboards image

2026-07-24 16:08:51 +02:00

hami

chore(packages/system/hami): bump HAMi to 2.9.0

2026-06-22 19:09:10 +03:00

harbor

fix(harbor): guarantee CPU for redis sentinels

2026-07-27 22:48:24 +03:00

harbor-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

hetzner-robotlb

chore(hetzner-robotlb): update robotlb chart to appVersion 0.0.6

2026-04-23 16:57:23 +05:00

http-cache-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

info-rd

refactor(labels): remove cozystack.io/ui label

2026-01-19 13:59:29 +01:00

ingress-nginx

Replaced direct chart edits with patch files

2026-03-02 12:35:14 +05:00

ingress-rd

feat(ingress): add proxyProtocol knob to ingress-nginx

2026-06-09 12:50:35 +03:00

kafka-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

kafka-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

kamaji

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

keycloak

test(backups): assert the barman-cloud sidecar checksum env on rendered ObjectStores

2026-07-22 15:50:25 +04:00

keycloak-configure

fix(keycloak-configure): patch HelmRelease in release namespace on teardown

2026-07-28 00:11:16 +03:00

keycloak-operator

chore(deps): update container image & action digests

2026-07-10 05:29:23 +00:00

kilo

chore(deps): update container image & action digests

2026-07-10 05:29:23 +00:00

kubeovn

feat(kubeovn): build the chart and image in-tree

2026-07-28 18:07:33 +02:00

kubeovn-plunger

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

kubeovn-webhook

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

kubernetes-nodes-rd

fix(kubernetes-nodes): drop unbacked cluster option source

2026-07-21 22:35:10 +03:00

kubernetes-rd

feat(kubernetes): per-node-group nodeHealthCheck overrides

2026-07-13 12:22:38 +05:00

kuberture

test(kuberture): pin shim contract with helm-unittest

2026-05-14 16:49:00 +03:00

kubevirt

fix(kubevirt): reinsert each GPU CR patch independently in make update

2026-06-08 17:15:00 +03:00

kubevirt-cdi

feat(kubevirt-cdi): make cloneStrategyOverride configurable

2026-07-03 19:14:33 +03:00

kubevirt-cdi-operator

fix(kubevirt-cdi-operator): add startupProbe to survive slow leader election

2026-05-25 11:54:45 +05:00

kubevirt-csi-node

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

kubevirt-instancetypes

fix(kubevirt-instancetypes): restore persistent EFI/TPM state

2026-07-06 09:49:50 +05:00

kubevirt-operator

chore(kubevirt-operator): update to v1.8.4

2026-06-24 15:50:36 +03:00

lineage-controller-webhook

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

linstor

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

linstor-gui

fix(linstor-gui): stop requesting offline_access so logout can revoke sessions

2026-07-24 14:19:24 +03:00

linstor-scheduler

fix(linstor-scheduler): re-vendor to upstream 0.3.1 with native admission webhook

2026-07-16 16:57:41 +03:00

local-ccm

Update local-ccm v0.3.0

2026-02-10 20:19:03 +01:00

mariadb-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

mariadb-rd

fix(mariadb): re-guard replication so single-replica passes the operator webhook

2026-07-02 15:48:29 +03:00

metallb

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

metrics-server

fix(metrics-server): move the listener off the kubelet's port

2026-07-20 05:24:04 +03:00

mongodb-operator

chore(packages/system/mongodb-operator): bump psmdb-operator to 1.22.0

2026-06-22 18:55:38 +03:00

mongodb-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

monitoring

feat(monitoring): install Grafana plugins from the in-cluster mirror

2026-07-24 16:08:51 +02:00

monitoring-agents

fix(monitoring-agents): relax fluent-bit probes for loaded installs

2026-06-24 23:38:38 +03:00

monitoring-rd

fix(monitoring): promote oidc.users[].role to required + regenerate schema

2026-07-15 15:31:45 +03:00

multus

test(multus): anchor the master-CNI assertion to the top-level key

2026-08-05 14:19:47 +03:00

nats

chore(packages/system/nats): bump nats to 1.3.16

2026-06-22 20:05:54 +03:00

nats-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

nfs-driver

chore(packages/system/nfs-driver): bump csi-driver-nfs to 4.13.3

2026-06-22 18:51:06 +03:00

objectstorage-controller

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

openbao

chore(packages/system/openbao): bump openbao chart to 0.25.7

2026-06-23 03:25:16 +03:00

openbao-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

opencost

chore(packages/system/opencost): bump opencost chart to 2.5.23

2026-06-23 14:39:14 +03:00

opensearch-operator

fix(opensearch-operator): use RollingUpdate maxSurge=0 instead of Recreate

2026-07-20 11:33:35 +05:00

opensearch-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

ouroboros

fix(ouroboros): render controller rollout strategy in every mode

2026-07-16 16:18:37 +03:00

piraeus-operator

[piraeus-operator] Split LINSTOR controller availability and metrics alerts

2026-03-25 16:11:14 +03:00

piraeus-operator-crds

Move CRDs installation logic to piraeus-operator-crds chart

2026-02-11 22:54:56 +01:00

postgres-operator

fix(postgres-operator): align CNPG operator and CRDs to 1.28.2 for PVC resize-deadlock fix

2026-08-04 17:31:05 +03:00

postgres-rd

feat(postgres): declare the tenant CA trust anchor

2026-07-21 23:59:48 +03:00

prometheus-operator-crds

fix(prometheus-operator-crds): clean chart dir before helm pull

2026-06-16 14:19:47 +05:00

qdrant

[qdrant] Add Qdrant vector database application

2026-02-06 13:30:58 +03:00

qdrant-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

rabbitmq-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

rabbitmq-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

redis-operator

chore(deps): update container image & action digests

2026-07-10 05:29:23 +00:00

redis-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

reloader

fix(reloader): add startupProbe to survive slow first start under load

2026-07-28 12:16:57 +03:00

seaweedfs

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

seaweedfs-db

test: cover flux v2.8 chart fixes and wire missing test targets

2026-05-31 15:02:33 +05:00

seaweedfs-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

securitygroup-controller

Prepare release v1.6.0 (promoted from v1.6.0-rc.4)

2026-07-22 13:00:10 +00:00

snapshot-controller

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

tcp-balancer-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

telepresence

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

tenant-rd

fix(computeplane): address review round three

2026-07-28 18:08:03 +02:00

velero

fix(velero): add startupProbe so slow startup does not crashloop the install gate

2026-07-01 06:04:22 +03:00

vertical-pod-autoscaler

fix(http-cache,vpa): fix haproxy 3.3 backend name conflict and vpa-for-vpa OOM (#2654)

2026-07-22 20:57:45 +03:00

vertical-pod-autoscaler-crds

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

victoria-metrics-operator

feat(monitoring): upgrade victoria-metrics-operator to v0.68.4

2026-04-20 15:48:53 +03:00

virtualprivatecloud-rd

[docs] Update cozyvalues-gen

2026-03-25 15:59:22 +05:00

vm-default-images

fix(vm-default-images): refresh stale Alpine and openSUSE 16.0 image URLs

2026-06-25 12:56:49 +05:00

vm-disk-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

vm-instance-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

vpn-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

vsnap-crd

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

.gitattributes

chore(codeowners): don't gate per-app generated files on architect review

2026-08-03 14:08:36 +03:00

Makefile

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00